Privacy policy

Who we are

Twofold is run by LogicLeap Ltd, company number to confirm, the data controller for the information described here. Our ICO registration number is to confirm. You can reach us at support email to confirm.

Twofold is for two adults

Twofold is for two adults who chose to play together. You confirm you're 18 or over when you sign up. It has no public profiles, no people search, no strangers and no chat with anyone other than your partner.

What we keep

• Your account: email address, first name, the date you confirmed you're 18 or over, your time zone, nudge time, quiet hours and settings.
• Your pair: who you're paired with, when the pair started or ended, your shared streak and covers, and your next time together if you set one.
• What you play: every move you make in a game, so a round can be scored and replayed for support, and the results that both of you have seen.
• What you make: notes, answers, drawings, photos and other Memory Book moments. Location and camera data are stripped from photos when you upload them.
• Reminders: your device's push subscription and a record of pushes sent, so we can keep to the daily cap.
• The Duo Pass: your plan and its status. Card details are handled by Stripe and never reach us.
• Analytics: only if you allow it, which pages are visited and how they're used (see the cookie policy).

What your partner sees

Your partner sees that you've played your half and whatever a game reveals once you've both played, with dates but never times. They never see when you opened the app or for how long, whether a push or note reached you, or where you are. Online status is a live dot only, and either of you can turn it off without the other being told.

Why we use it

• To run the service you asked for: sign-in, pairing, games, reminders and the Duo Pass (contract).
• To keep Twofold safe and working, fix errors and prevent abuse (legitimate interests).
• To take payments and keep tax records (contract and legal obligation).
• To understand how the site is used, only with your consent (consent).

Who helps us

We use a small number of providers, each under a data processing agreement:

• Cloudflare, which hosts the app and stores its data.
• Stripe, for payments and the billing portal.
• Resend, which sends sign-in emails.
• Google Analytics and Microsoft Clarity, only after you allow analytics cookies.

Error reports go to our own error tracker. Nothing calls an AI while you play. Some of these providers may process data outside the UK under approved safeguards transfer details to confirm.

How long we keep it

• Your account data, while your account is open.
• After you delete your account, everything you wrote or uploaded is erased within 30 days, backups included. Shared records keep a blank in your place.
• Analytics data, 14 months.
• Payment records, as long as tax law requires period to confirm.

Unpairing

Either of you can unpair at any time without the other's consent. The other person sees only "Your pair has ended". You each keep the Memory Book read-only, and you can delete anything you wrote or uploaded, which removes it from both copies.

Your rights

• Export: from Settings, once a day, as a zip behind a link that lasts 24 hours. It holds your own data, never your partner's details or moves.
• Delete: from Settings, by typing DELETE. You're unpaired and signed out at once, and any Duo Pass you pay for is cancelled.
• You can also ask us to correct, restrict or stop using your data, and you can complain to the Information Commissioner's Office at ico.org.uk.